CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
What the vulnerability does
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WPFactory Scheduled & Automatic Order Status Controller for WooCommerce order-status-rules-for-woocommerce allows Phishing.This issue affects Scheduled & Automatic Order Status Controller for WooCommerce: from n/a through <= 3.7.1.
Explanation of Vulnerability in Simple Terms
The Scheduled & Automatic Order Status Controller for WooCommerce plugin contains an open redirect vulnerability in versions up to 3.7.1. An attacker can craft a malicious link that redirects users to an external website after they interact with the plugin. This could be used to phish credentials or distribute malware. The vulnerability requires user interaction and does not directly compromise the site itself.
What an attacker can do
Redirect site visitors to a malicious external website via a crafted link.
Potential impact on your site
Users could be phished or exposed to malware if tricked into clicking attacker-controlled links.
Conditions required to exploit
Victim must click a malicious link; no authentication or special privileges required.
Key dates
External resources
